LTM plans Lightwell remediation services with IBM and Red Hat

LTM announced a collaboration with IBM and Red Hat on Lightwell. It plans an enterprise-services portfolio to help organizations incorporate remediations for vulnerable open-source software into engineering and security operations.

The planned services cover remediation strategy, dependency analysis, risk-based prioritization, remediation program management, DevSecOps integration, testing and validation, and support for large-scale deployments. The announcement gives no launch timetable, pricing, customer names, contract value or deployment count. It also does not specify how the three companies will divide contractual responsibilities.

The Lightwell work is separate from IBM’s consulting partnership with OpenAI, another enterprise-services agreement covered by DataPhoenix.

IBM describes Lightwell as an annual subscription that gives customers access to remediations through Lightwell repositories. Customers can integrate those repositories into existing build processes alongside public open-source repositories.

IBM and Red Hat introduced Project Lightwell as a clearinghouse and engineering effort intended to identify, validate and remediate vulnerabilities. Commercial subscriptions were designed to feed validated patches into customers’ existing software supply chains.

LTM Chief Information Security Officer Chandan Pani said the collaboration would help organizations strengthen cyber resilience at scale. The statement is a forward-looking issuer claim: the available sources provide no measured results showing that the collaboration has reduced remediation time, prevented exploitation or downtime, mitigated risk, or lowered operational burden.

IBM’s product page lists Lightwell Network as available. It lists Lightwell Clearinghouse Premier as available to preselected customers in critical-infrastructure sectors, with a broader release planned.